Free ISACA AAISM Practice Test & Real Exam Questions, Page 2

Question #16

Which of the following would BEST ensure a proper business continuity plan (BCP) is in place for an AI solution?

A. Testing the AI infrastructure failover mechanisms

B. Implementing access controls to protect the AI system from unauthorized use

C. Enhancing monitoring and detection of model failures and anomalies

D. Increasing the detail of AI solution backup and restoration processes

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #17

An aerospace manufacturer prioritizing accuracy and security wants to use generative AI. Which LLM adoption plan BEST aligns with its risk appetite?

A. Developing a private LLM to automate non-critical functions

B. Contracting LLM access from a reputable third-party provider

C. Developing a public LLM to automate critical functions

D. Purchasing an LLM dataset on the open market

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #18

Which of the following is the BEST reason to immediately disable an AI system?

A. Slow model performance

B. Excessive model drift

C. Insufficient model training

D. Overly detailed model outputs

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #19

An organization plans to use a natural language processing (NLP) system that processes and analyzes sensitive data. The data science team has proposed storing all raw text data indefinitely for potential model improvements and additional analytics. Which of the following is the BEST course of action?

A. Transfer encrypted data to a third-party storage service.

B. Propose data retention limits based on legitimate purpose.

C. Implement differential privacy on stored data.

D. Approve indefinite retention to improve future models.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #20

How can an organization BEST protect itself from payment diversions caused by deepfake attacks impersonating management?

A. Require mandatory deepfake detection training for all employees

B. Implement resilient payment approval processes

C. Issue a security policy on deepfakes

D. Mandate that payments be sent only once per week

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #21

Which of the following is the MOST important factor to consider when selecting industry frameworks to align organizational AI governance with business objectives?

A. Risk threshold

B. Risk tolerance

C. Risk register

D. Risk appetite

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #22

How can an organization best remain compliant when decommissioning an AI system that recorded patient data?

A. Update governance policies based on lessons learned

B. Ensure a certificate of destruction is received and archived

C. Perform a post-destruction risk assessment

D. Ensure backups are tested and access controls are audited

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #23

Cybersecurity teams should FIRST be embedded in the:

A. Model deployment phase

B. Model training phase

C. Model design phase

D. Model testing phase

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #24

An organization wants to ensure a new AI security program is in alignment with the existing information security program. Which of the following is the BEST course of action?

A. Establish key risk indicators (KRIs) and dashboards to measure AI security performance and present results to management.

B. Integrate AI security tasks into existing IT operations processes and apply additional technical controls.

C. Draft an initial program that defines AI-specific objectives, governance roles, and reporting responsibilities.

D. Develop awareness materials for employees and issue AI acceptable use guidelines across the enterprise.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #25

When selecting an AI model for a life insurance organization to enhance fraud detection, which factor is MOST critical to ensure secure and reliable deployment?

A. Adaptability

B. Robustness

C. Accuracy

D. Explainability

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #26

Continuous monitoring and training of an AI system BEST helps to control:

A. evasion attacks.

B. model drift.

C. model poisoning.

D. private data leakage.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #27

Which of the following MOST effectively addresses bias in generative AI models?

A. Data augmentation

B. Adversarial training

C. Data minimization

D. Fairness constraints

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #28

Which strategy is MOST effective for penetration testers assessing an AI model against membership inference attacks?

A. Measuring accuracy on the test set

B. Generating synthetic training data

C. Analyzing AI model confidence scores

D. Disabling model logging

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #29

A financial organization is deploying an AI-driven customer service platform that uses customer financial data and personalized responses. To ensure the platform remains compliant with data protection regulations, which of the following controls would be MOST important to implement?

A. Implementing role-based access control (RBAC) and monitoring activities

B. Encrypting all data used by the platform before processing

C. Logging all interactions and storing records to service level agreements (SLAs)

D. Providing clear, granular, and revocable consent options to customers

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #30

A health organization wants to use an AI tool for diagnostic decisions. Which of the following would BEST help the organization comply with privacy regulations?

A. Conducting a privacy impact assessment (PIA)

B. Sanitizing training data

C. Pseudonymizing AI model output data

D. De-identifying training data

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Free ISACA AAISM Practice Test & Real Exam Questions

Download Free ISACA AAISM Demo